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Abstract. Given an elliptic curve E and a positive integer N, we consider the problem of 
counting the number of primes p for which the reduction of E modulo p possesses exactly 
N points over Fp. On average (over a family of elliptic curves), we show bounds that 
are significantly better than what is trivially obtained by the Hasse bound. Under some 
additional hypotheses, including a conjecture concerning the short interval distribution of 
primes in arithmetic progressions, we obtain an asymptotic formula for the average. 



1. Introduction 

Let E be an elliptic curve defined over the rational field Q. For a prime p where E has 
good reduction, we let Ep denote the reduced curve modulo p and ^Ep(¥p) the number 
of Fp-rational points. Then the trace of the Frobenius morphism at p, ap{E), satisfies the 
well-known identity ^Ep(¥p) = p + 1 — ap{E) and the Hasse bound |ap(i?)| < 2y^. 

Let be a positive integer. We are interested in the number of primes for which 
^Ep(¥p) = N. In particular, we are interested in the behavior of the prime counting 
function 

Me{N) := #{p : 4^^Ep(¥p) = N}. 

Note that if ^Ep{¥p) = N, then the Hasse bound implies {y/p-lf < N < (i/p+ 1)^, which 
in turn implies that 

N- ■= {y/N-lf <p< (v^+ 1)2 =; N+. 

Hence, Me{N) is a finite number, and we have the trivial bound 



In |Kow06] ■ Kowalski shows that if E possesses complex multiplication (CM), then 

Me{N) <^E,e (2) 

for any £ > 0. He asks if the same might be true for curves without CM. However, no bound 
between ([T]) and ([2]) is known for curves without CM. 

Given an integer A^, it is always possible through a Chinese Remainder Theorem argument 
to find an elliptic curve E that achieves the upper bound ([I]), i.e., such that ^Ep(¥p) = N 
for every prime p in the interval {N~,N~^). Yet, for a fixed curve, one expects Me{N) to 
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be quite small. Consider the following naive probabilistic model for Me{N). If we suppose 
that the values of 4^E{¥p) are uniformly distributed, i.e., that 



Prob (#E(F,) =N) = {'f / (3) 

U otherwise. 



then we expect that 



M^(iV) ^ Yl Prob (#E(Fp) = N)= Yl A 

P N-<p<N+ 



dt 1 



(4) 



i^/N Jn- ^ogt hgN' 
Moreover, it is quite easy to show (see |Kow06] for example) that 

Y Me{N) = vr(X) + 0{VX) ~ (5) 

N<X 

where as usual, vr(X) := ^{p < X : p is prime}. Therefore, the average order of Me{N) 
is 1/ log N in accordance with the above model. Perhaps the correct way to interpret these 
statements is to say that Me{N) must be equal to zero on a density one subset of the 
integers for the mere reason that the primes are a subset of the integers of density zero. 
Finally, we note that while it is not difficult to see that liminf M£;(A^) = 0, numerical 
computations [ Kow06] are consistent with the possibility that limsup M£;(A^) = oo. In fact, 
using the model ^ as in |Kow06j . it is possible to predict this. 

2. Statement of results 

In this paper, we study the average for Me{N) over all elliptic curves over Q (and not over 
as in ([5])). Given integers a and b, let Ea^b be the elliptic curve defined by the Weierstrass 
equation 

Ea,b : y'^ = + ax + b. 
For A,B > 0, we define a set of Weierstrass equations by 

^{A, B) := {Ea,b ■■ \a\ < A, \b\ < B, A{Ea,b) ^ 0}. 
The following is our first main result. 

Theorem 1. IfA,B> VNhgN and AB > N^/^{\ogNf, then 

1 7,^ /Ar\ log log 



J2 Me{N) < 



holds uniformly for N > 3. 

We refer to the expression on the left hand side above as the average order of Me{N) 
taken over the family '^^{A, B). 

Under an additional hypothesis concerning the short interval distribution of primes in 
arithmetic progressions, we can prove an asymptotic formula for the average order of Me{N) 
over ^{A,B). In particular, we note that all of the primes counted by Me{N) are of size 
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lying in an interval of length AyN. Therefore, we require an appropriate short interval 
version of the Barban-Davenport-Halberstam Theorem. 

Given real parameters X, F > and integers q and a, we let 0{X, Y; q, a) denote the 
weighted prime counting function 



eiX,Y;q,a):= logp, 



X<p<X+Y 
p=a (mod q) 

and we let E{X, Y; q, a) be the error in approximating 9{X, Y; q, a) by Y/(p{q). That is, 

Y 



E{X,Y-q,a) := e{X,Y-q,a) 



Conjecture 2. (Barban-Davenport-Halberstam for intervals of length X'^) Let < t] < 1, 
and let /3 > be arbitrary. Suppose that X^ '^Y<X, and that y/(logX)^ < <5 < Then 

J2 E \EiX,Y;q,a)f<^YQ\ogX. 

q<Q a=l 
(a,q)=l 

Remark. If = 1, this is essentially the classical Barban-Davenport-Halberstam Theorem. 
See for example |Dav80[ p. 196]. The best results known are due to Languasco, Perelli, and 
Zaccagnini |LPZ10j who show that for any e > 0, Conjecture [2] holds unconditionally for 
Tj = 7/12 + e and for rj = 1/2 + e under the Generalized Riemann Hypothesis. For our 
application, we essentially need rj = 1/2 — e. 

Theorem 3. Lei 7 > 0, and assume that ConjecturelE holds withrj = | — (7 + 2 ) ^° ^^"^"^ ■ Sup- 
pose further that A,B > y/N {log NY+'^ loglog N and that AB > N''^/'^{\og Ny+'^ loglog N . 
Then for any odd integer N, we have 

^ ^ Me{N) = K{N)—-^ — - + 




#^{A,B) ^J^^^^^ ^ ^ V(iV)logiV V(logiV)i+7 

where 

^^^^ " JJ " (^^^wny ) n 0-£-w(£-i)) n (^^- iMNHi^i 

ug denotes the usual i-adic valuation, and Ni := A^/£^<?W denotes the (.-free part of N. 

Remark. We note that K{N) is uniformly bounded as a function of A^. We also note that 
N/ip{N) <^ log log (see |HW79t Theorem 328] for example), which gives the upper bound 
of Theorem [H Working with V. Chandee and D. Koukoulopoulos, the authors have recently 
shown that the upper bound implicit in Theorem |3] holds unconditionally. That is. Theorem [1] 
holds with log log replaced by N/ip{N). 

The average of Theorem [3] displays some interesting characteristics that are not present 
in the average order In particular, the main term of the average in Theorem [3] does 
not depend solely on the size of the integer A^ but also on some arithmetic properties of 
A^ as it involves the factor K{N)N/ip{N). The occurrence of the weight (p{N) appearing 
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in the denominator seems to suggest that this is another example of the Cohen-Lenstra 
Heuristics |CL84at ICL84b] . which predict that random groups G occur with probabihty 
weighted by l/#Aut(G). Notice that if as an additive group ifE{¥p) ~ Z/NZ, then 
#Aut(-E(Fp)) = ip{N). Indeed, the Cohen-Lenstra Heuristics predict that relative to other 
groups of same size, the cyclic groups are the most likely to occur. 

In some work in progress, the authors are exploring this further, considering the average 

of 

Me{G) ■.= i^{p:E{¥,)c^G} 

for those Abelian groups G which may occur as the group of Fp-rational points of an el- 
liptic curve. In a preliminary computation, the authors have compared the averages for 
ME(Z/iVZ X Z/NZ) and Me\z/N^Z) when N is prime. In this case, we note that 

#Aut(Z/iVZ X Z/NZ) = N{N - lf{N + 1) and #Aut(Z/iV2z) = N{N - 1); 

so we would expect the cyclic group to occur roughly A^^ times more frequently. Indeed this 
seems to be case. 

We can express the results of Theorem [3] as stating that for a "random curve" E/Q and 
a "random prime" p G {N~,N~^), 



log N 

refining the naive model given by ([3]). Here, as in (|3]), we make the assumption that there 
are about A\/N/\ogN primes in the interval (A^~,A^+) though we can not justify such an 
assumption even under the Riemann Hypothesis. 

There are many open conjectures about the distributions of invariants associated with the 
reductions of a fixed elliptic curve over the finite fields ¥p such as the famous conjectures of 
Koblitz |Kob88] and of Lang and Trotter |LT76] . The Koblitz Conjecture concerns the num- 
ber of primes p < X such that i^E{¥p) is prime. The fixed trace Lang- Trotter Conjecture 
concerns the number of primes p < X such that the trace of Frobenius ap{E) is equal to a 
fixed integer t. Another conjecture of Lang and Trotter (also called the Lang- Trotter Conjec- 



ture) concerns the number of primes p < X such that the Frobenius field Q{^y ap(E)'^ — Ap) 
is a fixed imaginary quadratic field K. 

These conjectures are all completely open. To gain evidence, it is natural to consider the 
averages for these conjectures over some family of elliptic curves. This has been done by 
various authors originating with the work of Fouvry and Murty [FM96j for the number of 
supersingular primes (i.e., the fixed trace Lang- Trotter Conjecture for t = 0). See |DP99[ 



IDP041 IJam04t [BBIJOSt D^TTl ICF for other averages regarding the fixed trace Lang- Trotter 



Conjecture. The average order for the Koblitz Conjecture was considered in |BCDj . Very 
recently, the average has been successfully carried out for the Lang- Trotter Conjecture on 
Frobenius fields [ClJj . The average order that we consider in this paper displays a very 
different character than the above averages. This is primarily because the size of primes 
considered varies with the parameter A^. Moreover, they all must lie in a very short interval. 
This necessitates the use of a short interval version of the Barban-Davenport-Halberstam 
Theorem (see Conjecture [2]) • This is also the first time that one observes a Cohen-Lenstra 
phenomenon governing the distribution of the average. 
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4. Reduction to an average of class numbers 

Given a (not necessarily fundamental) discriminant D < 0, we follow Lenstra |Len87j in 
defining the Kronecker class number of discriminant D by 

wiD/py 



H{D):= 3^^' (6) 



■^=0,1 (mod 4) 

where h{d) denotes the (ordinary) class number of the unique imaginary quadratic order of 
discriminant (i < and w{d) denotes the cardinality of its unit group. 

Theorem 4 (Deuring). Let p > 3 be a prime and t an integer such that — 4p < 0. Then 

V , \ , =g(t'-4p), 
^ #Aut E ^ 

ap{E)=t 

where the sum is over the ¥ p-isomorphism classes of elliptic curves. 

Proof. See |Len87l p. 654]. □ 

The first step in computing the average order of Me{N) over ^{A,B) is to reduce to 
an average of class numbers by using Deuring's Theorem. The following estimate will then 
be crucial to obtain the upper bound of Theorem [H and is also used in getting an optimal 
average length in Theorem [31 

Proposition 5. For primes p in the range N~ < p < , we define the quadratic polynomial 
Dn{p) := (p + 1 - A^)' - 4p = p2 _ 2{N + l)p + {N - if. (7) 

N-<p<N+ ^ 

Before giving the proof of this result, we define some notation that we will use throughout 
the remainder of the article. Given a negative discriminant d, we write Xd for the Kronecker 
symbol (-). Since d is not a perfect square, the Dirichlet L-series defined by 



Xd{n) 



n=l 



converges at s = 1. Finally, given a positive integer /, we let 



Dn{p) 

dN,f{P) ■= p > (9) 
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where Dn{j>) is defined by ([7]). 

Proof of Proposition O The definition of the Kronecker class number (P) and the class num- 
ber formula |IK04t p. 515] 

h{d) 



w{d) 2tx 



L{l^Xd) (10) 



give us the identity 



N-<p<N+ N''<p<N+ flDpfip) 



£l01=O,l (mod 4) 



Since |-DAr(p)| < AN, this yields 

N'<p<N+ N-<p<N+ f\DN{p) •' ^11'' 



zO,l (mod 4) 



In order to obtain an optimal bound for this expression, we will use the fact that for 
almost all primitive Dirichlet characters ip, L{1,iIj) is well-approximated by a very short 
Euler product. More precisely, fix any integer a > 1. Then by |GS03[ Proposition 2.2], we 
know that 



n (12) 



£<(logQ) 

for all but at most Q^/a+siogiogiogQ/iogiogQ ^^le primitive characters of conductor less than 
Q. We remark that this gives a good upper bound for L{l,x) whenever x is a Dirichlet 
character modulo q < Q which is induced by a primitive character ip satisfying (fT2!) . Indeed, 
let X such a Dirichlet character, and let ip be the primitive character that induces x- 
Then by (fT2|) . we have 

e\q ^ ^ <?<(logQ)« ^ ^ 

- n (-f^) n (i-f)^i..a)) 



i\q ^ ' ^<(logQ)°= 

£>(logQ)" 

« n (-a n O-'^"' 



« n (i + logiogg. 



^>(logQ)" 



where the last hne follows by Mertens' formula |IK04t p. 34] since a is fixed. For the 
remaining product, we observe that 



< exp <^ — - ^ < exp ' 



n h-p E 7 



l\q ^ ' l\q 



(log g)"j- log 2 



where denotes the number of distinct prime factors of q. Therefore, since a > 1, we 
may conclude that if x is a character of modulus q < Q and (fT2|) holds for the primitive 
character inducing then 

L(l,x)«loglogQ. (13) 

We make use of this fact in ffTTj) as follows. Let d*pf{p) be the discriminant of the imaginary 
quadratic field Q{^/D]\[{p)). Then d*j^{p) is a fundamental discriminant, and Xdi,{p) is the 
primitive character inducing every character of the set {Xdjv/(p) • P I D^^p)}. Furthermore, 
|(i^(p)| is the conductor of each of these characters, and 3 < |(i^(p)| < 4iV. Now fix some 
a > 100, and let S'{Q) be the set of primitive characters of conductor less than or equal to 
Q for which ([12]) does not hold. Then #^?(4A^) < N^/^°. We now divide the outer sum over 
p on the right-hand side of ffTTl) according to whether or not the primitive character Xd}^{p) 
is in the exceptional set ^(4A^). For those p for which Xrf^(p) is not exceptional, we use (fT3|) . 
writing 

^ ^ ^^^«,ogiogiv E 7 E 1- 

N-<p<N+ f\DN(p) f<2^ N-<p<N+ 

X,*^M^S{m Rl0Pl^O,l (mod 4) PlDNip) 

To bound the sum over p, we apply the Brun-Titchmarsh inequality [IK04| p. 167], which 
gives that 

#{N- <p<N+ ■.p = a (mod/)}< 



For the sum over a, we use the bound 

#{a G Z//Z : D^ia) = (mod /)} < V7, 

which is Lemma [12] of Section [8] Combining these two estimates, we have that 

V- L{l,Xd^jip)) VNloglogN y. log/ 

2^ 2-^ f logN ^ f^/Mf) 

N-<p<N+ flD^ip) •' ^ />1 ' 



Xa*^(,)mm Rm^^O^I (mod 4) (14) 

^ log log 



logA^ 



It remains to estimate the sum over primes p such that Xd*^{p) ^ <?(4A^). In that case, we 
simply need the standard bound 

L{l,x) < log?, 



which is vahd for all Dirichlet characters of conductor q (see |Dav80t p. 96] for example). 
We note that 

#{iV- <p<N+: Xd^(p) e ^(4iV)} < #^(4iV)r(4iV), 
where r(n) denotes the number of positive divisors of n. Therefore, we obtain the bound 



N-<p<N+ P\Dm{p) N-<p<N+ P\Dm{p) 



{15) 



for any e > 0. Combining ffTTj) . (JH]), and f|T5l) completes the proof of Proposition O □ 
Proposition 6. Let D]\r{p) be as defined by ([7]). Then 

1 ^ /.n ^PJV(P)) 



where 



II \ ^ ■> E&'g(A,B) N-<p<N+ ^ 

8{N- A, 5) « - + + - j TiV log log N + ^ 



uniformly for A,B>Q. 

Remark. The above holds without assuming that is odd. 

Proof of PropositionlB First, we write Me{N) as a sum over primes and interchange sums 
to obtain 

^ ^ ' ^ E(^V{A,B) 7r V ! 7 Ar-<p<Ar+ £;e'r(A,_B) 

#i?p(Fp)=Ar 

For each prime p, we group the G ^(A, -B) according to which isomorphism class they 
reduce modulo p, writing 

J2 ^= H ^Ee^A^B) = 

E&V{A,B) E/¥p 
#Ep(Fp)=7V #E{¥p)=N 

For large enough (A^ > 8), the primes 2 and 3 will not enter into the sum over p. Thus, we 
will assume that p > 3 throughout the remainder of the article. Therefore, given a elliptic 
curve defined over Fp, we may associate a Weierstrass equation, say Eg^t : y'^ = + sx + t 
with s,t G Fp. Using a character sum argument as in |FM96t pp. 93-95], we have 

urrp^c^fAm z? ~ z? 1 4:AB{p-l) f Ahgp B\ogp ^\ 

where Aut(£'s,t) denotes the size of the automorphism group of Eg^t over Fp. Substituting 
this estimate and applying Theorem HJ we find that 

' E ^-(^)= E ^^^^+WA5), 



TT \ J J Ee'^CA.B) N-<p<N+ ^ 
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where 



I ViV \ / J N-<p<N+ 

Here we have used the fact that B) = AAB + 0{A + 5) and p = + 0(A/iV) for 

every prime p in the interval [N~,N~^). Therefore, the result now follows by applying the 
upper bound of Proposition \5\ □ 

Theorem [1] now follows immediately upon combining Proposition |5] and Proposition [6], and 
noting again that p = N + 0{\/N) for every prime p in the interval (iV~, A^+). Furthermore, 
we have reduced the proof of Theorem [3] to computing the sum 

N-<p<N+ ^ 

This computation requires several intermediate results. Therefore, we delay it until Section [71 



5. A SHORT AVERAGE OF SPECIAL VALUES OF DiRICHLET L-FUNCTIONS 

Since Theorem [3] holds only for odd A^, we assume for the the remainder of the article 
that is an odd integer except during the proof of Lemma [121 Recall that Lemma [121 was 
used in the proof of Proposition [5l which holds for all positive integers A^. 

In this section, we prove a short average result for special values of Dirichlet L-functions 
that is needed to compute our average over elliptic curves. As the average is very short, we 
need that the equivalent of the Barban-Davenport-Halberstam Theorem holds for intervals 
of that size. 



Theorem 7. Let 7 > 0. Suppose that N' < X < X + Y < with Y > VA^/(log A)" for 
some choice of v > 0. Assume that Conjecture\^ holds for intervals of length Y . Then for 
odd integers N , 



J2 1 H L{l,Xd,,,ip))\ogp = KoiN)Y + o( 



Y 



/<2yx+F X<p<X+Y 
(/,2)=1 f\DM{p) 



(log AT)- 



where 



CO _ CXD ^ 



f ^ n(p(Anp , 

f=l •> n=l •' ' aeZ/4nZ 

(/,2)=1 a=l (mod 4) 



and 



C^(a, nj):={ze (Z/Anf^Z)* : Dn{z) = af^ (mod Anf^) }. (17) 

Proof. Let U he a. real parameter to be determined. Using partial summation and Burgess' 
bound for character sums [Bur63l Theorem 2] to bound the tail of the L-series, we have 
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For < p < N^, we have \dNjip)\ < 4A^//^, and hence 



1 fdNAp)\ ^YN^^' 



E- log^y^-, , ^ 

f<2^/XTY X<p<X+Y n>U ^ ^ ^ ^ 

(/,2)=1 f'\DN{v) 

Now let V be a real parameter to be determined. Using Lemma [121 we obtain 



V<S<2sfXAY ri<U X<p<X+Y 
(/,2)=1 P\Dn{p) 



<logt/logiV 1 H ^ 

V<f<2VX+Y X<k<X+4VN 
(/,2)=1 f\DNip] 



«logC/log]V y VNtlzeZ/fZ:D.{z)^0 (mod/)} 



v</<2v^x+y 

(/,2)=1 



< ViVlogf/logiV^-^ 



^iVlog?71ogA^ 



and therefore, 



logp 



/<2^/X+y X<p<X+y /<y n<U X<p<X+Y ^ / 

(/,2)=1 P\Dn(p) (/,2)=1 /2|D^(p) 

^ / r A^7/32 log f/ log \ 

^ \ Vu ^ VV J' 

With 0^(0,, n, /) as defined by f|T7j) . we regroup terms on the right hand side above, writing 

E ^ E (^)i-.^ E ^ E C:) E 

f<V,n<U •' X<p<X+Y ^ ^ f<V,n<U •' a&Z/AnZ beCN{a,nJ) 

(/,2)=1 f\DNip) (/,2)=1 a=l (mod 4) 

/ \ 



^ E ^ E (^) E log. 

f<V,n<U a&/AnZ X<p<X+Y 

(/,2)=1 a=l (mod 4) f\DNip) 

DNip)=af 

\ p|4n/2 y 
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If p satisfies tlie congruence Dn{p) = ap (mod ^np) and p divides 4:np, then p divides 
(4n/^, (A^ — 1)^ — ci/^). It follows that such a p must divide n{N — 1). Hence, the error term 

^ ^ [-) Yl ^ogp <t:UlogN\ogV + UlogU\ogV, 

f<V,n<U ■'^ a&jAnL ^ X<p<X+Y 
(/,2)=1 a=l (mod 4) P\Dt,{p) 

DN{p)=ap 
p|4n/2 

and 

/<2VX+y X<p<X+y f<V,n<U •' aeZ/4nZ b&CN{a,n,f) 

(/,2)=1 /''li'ivCp) (/>2)=1 a^l (mod 4) 



We approximate ^(X, F; 4:np, b) by Y/ip{4nf'^), incurring an error of 



f<V,n<U •' aeZ/4nZ beCNia,nJ) 

(/,2)=1 a=l (mod 4) 



For any given value of 6 G (Z/4n/^Z)*, there is at most one value of a G Z/4nZ satisfying 
the congruence Dj\f{b) = ap (mod Anp). Hence, interchanging the two inner sums shows 
that 

E © E EiX,Y;Anp,b)<^ J] \E{X,Y;Anp,b)\ . 



a=l (mod 4) 



6e(Z/4n/2Z)* 



By Cauchy-Schwarz, the error term (ITS]) is 

«E7E^ E \E{X,Y;inf,b)\ 



f<V ^ n<U ^ f)e(Z/4n/22 



< 



y- 



E 

.n<U 



ip{Anp 



1/2 



n<C/ fe6(Z/4n/2Z)* 



1/2 



< V^Vlogf/ 



5^ J] \EiX,Y;q,a)f 



q<4UV^ a=l 
(«,<?)=! 



1/2 



Assuming Conjecture [2] for an appropriate value of r], we obtain the bound 

1/2 



(a,g)=l 



rVy/log^/logA^ 
(log A^) 2^^+37+5 
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whenever 

Y 

~ (log Ar)4i'+67+io ^ 

Thus, we have 

f<2^X+Y X<p<X+Y f<V,n<U •' ■' ' ae1/An1 

(/,2)=1 f^\DN{p) (/,2)=1 a=l (mod 4) 



+ 



O ( + ^ ^ + U \og{UN) log V 



V (log A^) 2^+37+5 ■ 



Lemma 8. For any U,V,e> 0, we have 



f<V,n<U ■' ■' ' a&l^nL ^ ^ 

{/,2)=1 a=l (mod 4) 

We delay the proof of Lemma [8] until Section [HI Applying the lemma and choosing 

5: i 5: L(i„^,^,,,,)iogp=A'„(A')y+o(^j-i^) 



we have 



/<2VX+F X<p<X+Y 
(/,2)=1 /2|Div(p) 



provided that Y ^ v A^/(logA^)". Note that our choice of V satisfies the condition (|T9|) . 

□ 

6. Computing the "almost constant" 

Recall that CN{ci,n, f) was defined by 

C^(a,n,/) = {ze {Z/AnfZy : D^iz) = af (mod Anf)} , 

where Dn{z) = z^ — 2{N + l)z + (A^ — 1)^. The following is the main result of this section. 

Proposition 9. With K{N) as defined in Theorem\^ and Kq{N) as defined in Theorem^ 
we have 

Proof. By the Chinese Remainder Theorem and the definition of CNidyU, f), 
where 

Cf{a,n, f) := {z G (Z/r^(^"^')Z)* : Dn{z) = af (mod r^(4"/'))}. (20) 
We require the following lemma whose proof we delay until Section [HI 

12 



Lemma 10. Suppose that N and f are odd and that a = 1 (mod 4). Let i be any odd prime 
dividing nf , and let e = v^^Anp) = v^inp). Ifi^AN + ap, then 



l+(^) ^finN-lr-ap, 
1 ^/£|(iV_l)2_a/2. 



Ifi\4:N + ap, then with s = ui{4N + ap), we have 

I otherwise. 
In particular, if £ \ f , then 



#ci;)(i,i,/) = <( 



2iMN)/2 1 < < 2ue{f), 2 I ue{N), and (f ) = 1, 

zf2u,{f)<u,{N), 
otherwise. 



where Ni = N/i'^''^^^ is the (.-free part of N. Furthermore, 

(2 z/z/2(4n/2) = 2 + z/2H = 2, 
#CjJ)(a,n,/) = < 4 if U2{Anf^) = 2 + U2{n) > 3 and a = 5 (mod 8), 
[^0 otherwise. 

By Lemma [101 W6 may write 

ifCS\a,n,f)=2S2{n,a), 

where 

{1 if 2 t n, 
2 if2|nanda = 5 (mod 8), (21) 
otherwise. 

Note that if £ is a prime dividing / and not dividing n, then a/^ = (mod as 
z/£(4n/^) = lyeif^). Hence, in this case, #C^''(a, n, /) does not depend on the value of a, and 
so we write #C^^(a,n, /) = #C{J)(1, 1, /) if £ I / and i t n. Therefore, letting n' denote the 
odd part of n and 

ae(Z/4nZ)* £|n' 
a=l (mod 4) 
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we may write 



oo ^ oo ^ 



f=l f^l^'fi^^p) 

(/,2)=1 



aeZ/4nZ 
a=l (mod 4) 



n 



oo ^ oo 



f=i fMf)^^{nJ)n^{An) 

(/,2)=1 



CNj{n) 



(22) 



n] 



where the prime on the outer sum indicates that the sum is to be restricted to those / which 
are odd and are not divisible by any prime for which #CJJ^(1,1,/) = 0. 

In order to proceed further, we must show how to compute the function c^jin). We 
summarize the computation in the following lemma whose proof we also delay until Section [8l 

Lemma 11. Suppose that N and f are odd. The function CN,f{n) is multiplicative in n. Let 
a be a positive integer and i an odd prime. Then 

C7V,/(2") 



Ifi \ f andi\N, then 

Ifi \N and£] f, then 
Ife\Nf, then 

CNjin 

Oa-l 



Pa-1 



)a-l 



-1)"2. 

£ - 1 if2\a, 



fa-l 







2. 



z/2ta. 



-2-(f)-(^) +m 



e J ' \ e 



iV+l\2 

e ) 

N{N+iy 



if2\a, 
tf2\a 



Ife I (/,iV) and 2ue{f) < MN), then 



/)(£-!). 



If I I (/,iV) and v,{N) < 2v,{f), then 



- 1 z/ 2 I a, 
if2\a. 
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Ifi I {f,N) and v,{N) = 2v,{f), then 



Pa-l 



a, 



where Ne = A^/£^<^W denotes the £-free part of N. Furthermore, for any n, we have the 
hound 



CNj{n) < 



^n.|(/,n)#giv(l.l./) 
K2N{n) 



where for any integer m, Umin) is the multiplicative function defined on prime powers by 



£ if2\a and £\m, 
1 otherwise. 



(23) 



Recalling the restrictions on / in fl22|) and applying Lemma [TT|, the sum over n in fl22l) 
may be factored as 



MinJ)) 



1 {n, f)nip{4n 



n *Cn\^^J) 



, a>0 



2°(/?(2"^ 



HE 



^((r,/))c7v,/(r 



(£-,/)£-^(£")#CJJ)(l,l,/) 



^1/ 



a>l 



4/ 4/ 

where for any odd prime £, we make the definitions 

£-2 



1 



i£-ir 
-iv-n2 



(1 + 9 



-1) 



if <2z/£(/), 
if z/,(iV) >2z/£(/), 

i{ue{N)=2ue{f). 



Substituting this back into equation (12^ . we have 



^o(iV)-3lFoWlpiW 1^ ^(yyy^ [[^r^ii^r^- 

e\N i\N f=i -ryj jj uv ; n ; 

^7^2 (/,2)=1 £|Ar l\N 



(24) 
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The sum over / may be factored as 



{/,2)=1 l\N l\N 



When I \ 2N, the factor simphfies as 



= 1 + 



(£2-l)(£3_l)ir^(£) 
(^^-l)(^-l)i^lW 



When Pi{N) is odd, the factor simphfies as 



#ci;Hi,i,r)F2(£,r) 



(1 + \) 



a>l 



= 1 



1 + 
1 + 



(/: + i)(i - (^-'i^)) 
Fo{e){e - - 1) 
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When Ui(N) positive, even, and (^) = —1, the factor simphfies as 



^ ^#Cff(l,l,r)F2(£,£") 



^ Fo{i)t^(^){i~iy ^ Fo(£)(£- l)£3-.W/2 



Fo(£)£'^^W(£- 1)2 Fo(£)£^^W(£- 1)2 
Fo(£)£-^(^)(£-l)2 



^Fo(£)^'^^W(^-l)2' 



When ^'^(A^) positive, even, and (-^) = 1, the factor simphfies as 



^ #ci;^(i,i,r)F2(£,r) _ e ^ i^d^\i,i,nm.n 

^ ^ f'-^C^) - i ^ £#Cff (1, l,r^(^)/2)^2(£^ £-HAf)/2) 



Fo(£)£-^W(£- 1)2 Fo(£)(£- l)£3-.W/2 



#c{J\i,i,r)F2(£,r) 



''^C^) , 1 



r^W-£2 £(£2_;^)^^^^^^^^^_2 

^ Fo(^)£'^^W(^ - 1)2 ^ Fo{£){£ - - 1)^'^^W 



= 1 



1 + 



Fo(£)£^^W(£-l)2 Fo(£)(£-l)2£-^W 
Fo(£)(£-l)2£'^^W 
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Substituting this back into (12^ . we find that 



X 



fu,{N) _f, (^\ 



11 (^^+ £v,(7V)(£_ 1)2 j 



2 



^1 

2|i^£(iV) 



n ^ 



2t!^,(A^) 



2|vf(7V) 



□ 



7. Proof of Theorem [3] 
We are now ready to give the proof of our main result. 

Proof of Theorem O By Proposition |6l we see that Theorem [3] follows if we show that 
^ H{D^{p)) _ N ( 1 

P ^ V(iV)logiV V(logiV)^+^ 

We begin by dividing the interval (A^~, A^+) into intervals of length Y := |^(iog'^7+2j • For 
each integer in / := /Y, 2^ /Y) n Z, we write X = Xk := N + I + kY . Thus, 

^ H{Dm{p)) _ ^ ^ i^(^iv(p)) _ ^25) 

N-<p<N+ ^ kal Xk<p<Xk+Y P 

Recalling the definition of the Kronecker class number, the definition of d-Njip), and the 
class number formula (see (E]), ([9]), and (JTOl)). we have the identity 

H{D^ip)) = ^ J2 yJ\d^Ap)\L{l,Xd^.fip)). (26) 

f\DNip) 
dN,f{p)=0^ (mod 4) 
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We assume that is large enough so that there are only odd primes p satisfying the condition 
< p < N~^. Therefore, since we assumed that N is odd, 

Dj^{p) = (p + 1 - A^)2 - 4p = 1 (mod 4), 

and it follows that there are only odd / in the above sum and that dNj{p) = 1 (mod 4) 
for each such /. Hence, summing f l26|) over all primes p in the range X < p < X + Y and 
switching the order of summation, we have 

X<p<X+Y ^ X<p<X+Y ^ P\Dn{p) 

1 V- 1 V- y/\D^\ ri. ^ ^^^^ 

= ^ 7 ~ ^li>Xd^j(p)j • 

/<2x/X+y ■' X<p<X+Y ^ 
(/,2)=1 P\Dn{p) 



\-kT 1 U • 1 i. )7 ■ ; ■ \/\Dn{p)\ 1 -v/|Djv(X)| logp -rr ■ • • J.U 

We now change weights, approximatmg — — by - — j^^^^j^ — • it p is a prime m the 

interval (X, X + F], then p = X + 0{Y), and hence 

Dn{p) = Dn{X) + 0{Y^). 

Let X* be the value minimizing the function ^J\DM{t)\ on the interval [X, X + F] . Since it 
is also true that p = N + 0{\/N), we have that 



V\D^\ y/\DN{X)\\ogp 



p X log X 



+ ^ ifx±G[x,x + r], 

V}££l^ + ^^^_ otherwise. 



Hence, by Theorem [7] and Proposition |9l the right hand side of (j27l) is equal to 




Yy/\DMiX)\ Yy/\Dt,{X)\logN y3/2iogjv i \f Ar± c \ Y V M 

+ 1 "T M3/2 "T atS/4 II iV t [^,^ -T 



(2^ 



K{N)Y^\DNiX)\ I ^ I iv(iog7V)7+i + + 7V3/4 

2^^(X)logX +1^/^^^^ yv^l5g^iogiv y^io,^ ^ 



Since DN{Xk) = for A; on the endpoints of the interval [-2VX/F, 2VX/F] D /, by the 
Euler-Maclaurin summation formula, we have 



p2VN/Y / p 

V v/|^7v(Xfe)| = / V4X - {tYYdt + o[ 

kGl J-2VN/Y \J- 

o (Vx) , 



2y/N/Y 



\tY' 



2VN/Y ^/AN^JtY)' 



-At 



2nN 



Y 

and furthermore, 

^ ^iD^iXDl J^2VN/Y v/4X - {tYf ~ Y J_,^ V4X - ~ Y' 
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Whence, summing (128|) over k & I, we have 

^ HjPM) .^..n N f 1 riogiV 

□ 

8. Proofs of lemmas 

In this section, we give the proofs of the technical lemmas needed in the rest of the paper. 

Lemma 12. For every positive integer f , 

#{a e Z//Z : Z}^(a) = (mod /)} « V?. 

Remark. Recall that since this lemma was used in the proof of Proposition |5l we do not 
assume that is odd here. 

Proof of LemmallM First, we use the Chinese Remainder Theorem to write 
#{a G Z//Z : Div(a) = (mod /)} = JJ #{a G Z/t'^^^Z : Djvia) = (mod t'^^^)}. 

We will show that 

From this, we readily deduce that 

#{aGZ//Z:D^(a)=0 (mod /)} < 8v^, 

which is a more precise result than stated in the lemma. 
We now give the proof of (l29l) . Since 

Dj^ia) = a^ - 2{N + l)a + (A^ - 1)^ = (a - - 1)^ - AN, 

it suffices to consider the number of solutions to the congruence 

Z'^ = m (modr). (30) 

Suppose z is an integer solution to ( !30l) and write AN = i'^No with (£, Nq) = 1. If s > e, it 
follows that z = (mod i^^^'^'^), and hence there are at most £Le/2j solutions to ( 130|) . Thus, 
we may assume that s < e and write 

= t{No + t-'k) 

for some integer k. Since (^, iVo) = 1, it follows that s must be even. Writing s = 2so, we 
see that z = i^°x, where x is an integer solution to the congruence 

= No (mod t-'). (31) 

So, in particular, z = t°x (mod £^~'*'^). Since {i,No) = 1, it is a classical exercise as 
in \RW79\ p. 98] to show that 

'2 if £ > 2, 



#{X G Z/t-'Z ■.X' = No (mod T"")} < 
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'5 

4 if £ = 2. 



Therefore, there are at most 2r-(^-*«) = 2£^/2 < 2^(e-i)/2 solutions to ([30]) when £ is odd, 
and there are at most 4£e-(e-«o) = 4£s/2 < 4£{e-i)/2 solutions when £ = 2. □ 

Proof of LemmalB By Lemma fTTl CNj{n) <^ "n<;|(/,n)^#fiv (i.iJ) ^ ^]-^gj,g f^j, g^j^y positive inte- 
ger m, Hrn{n) is the multiplicative function defined on the prime powers by ( l23ll . Therefore, 



f ^ nu){AnP) 

f<V n<U ' a&LjAnL 



/V(/) {nJ)n^{An)]\.,,,i^&^\lXf) (32) 



En^i/#c'^^(i' 1,/) 



(/-2)=1 



(/,2)=1 



where the primes on the sums on / are meant to indicate that the sums are to be restricted 
to odd / such that #C{J^(1, 1, /) 7^ for all primes i dividing /. 
In |DP99l Lemma 3.4], we find that 



y— 

< ^ (n\i, 



Co 



for some positive constant cq. In particular, this implies that the full sum converges. From 
this we obtain a crude bound for the tail of the sum over n 

y - = y - = Y J— y 



{m,2N)=l t\k^l\2N (m,2Af)=l 

i\k^l\2N 



1 ^ ttA ±_ 
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We have already noted that N/(f{N) <^ log log A^. It is a straightforward exercise as 
in |MV07l p. 63] to show that 



i\N 

Thus, we conclude that 



n(i.i=)<e.p{o( 



yio^ 

log log 



Y — < ^ (33) 

for any e > 0. For the full sum over n, we need a sharper bound in the A^-aspect, which we 
obtain by writing 

{n,2N)=l 

< yr / 1 \ 1 (34) 

-^{2N)j^l\ + i(i - I) ) y >,,(nMn) 

< log log A^. 

For any odd prime i dividing /, we obtain the bounds 



(2iMN)/2 if ^^(j) > iye{N)/2 and 2 | z/^(Ar), 
otherwise 



from Lemma [TOl However, if lygif) > vt{N)/2 and 2 | v^{N), it follows that t'£(/) > 
1 + ui{N)/2, and hence 

since i> 2. Therefore, for every odd integer /, we have that 

n#c7^^(i,i,/)</, 

and hence 

(/,2)=1 

Substituting the bounds f l33|) . flMj) . and f l35|) into f l32|) . the lemma follows. □ 

Proof of LemmalWi Upon completing the square, we have that 

- 2{N + l)z +{N- 1)2 -af^ = {z-N~ 1)^ - (4A^ + af^). 

Since A^ is odd, the number of invertible solutions to the congruence 

(;z - A^ - 1)2 = 4A^ + a/2 (mod 2") 

is the same as the number of invertible solutions to the congruence = AN + af'^ (mod 2"). 
Since 4N+af'^ = 4+a (mod 8), the computation of C^\a, n, /) is thus reduced to a standard 
exercise. See |HW79l p. 98] for example. 
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If £ I AN + ap, then there are exactly 1 + ^ "^^+"/ j solutions to the congruence 

{z- N -ly =AN + af (modT). (36) 

However, if £ divides the constant term, (A^ — 1)^ — ap, then we have exactly one invertible 
solution and exactly one noninvertible solution. 

It remains to treat the case when i \ AN + ap. We write AN + af^ = tm with {m,i) = 1. 
First, we observe that any solution z to (1361) must satisfy z = N + 1 (mod i). Therefore, if 
i \ N + 1, then there are no invertible solutions; if i \ N + 1, then every solution is invertible. 
Hence, we assume that i \ N + 1. Now, the number of invertible solutions to fl36l) is equal 
to the number of (noninvertible) solutions to 

Z^=i'm (modr). (37) 

If s > e, then Z is a solution if and only ii Z = (mod £1^*^/^^). There are exactly i"^~r^/2l = 
£Le/2j such values for Z modulo i*^. Now, suppose that < s < e. Then Z is a solution 
to (157|) if and only if 

Z^ = tm + tk = r (m + t-') 

for some integer k. Since I \ m and s < e, we see that there can be no such Z if s is odd 
or if (y) = —1. Thus, we assume that s = 2so, (y) = 1, and we write = m + 
Under this assumption, there are exactly two (distinct modulo f*^"*) solutions, say ri and 
r2, to the congruence = m (mod f^"^**"). Therefore, if Z is a solution to (|3711 . then either 
Z = £^°(ri + kil'^~'^) for some integer ki oi Z = £*°(r2 + /c2^^~'') for some integer k2. In 
other words, Z = £^°ri (mod or Z = l^°r2 (mod It is not hard to check that 

if Z satisfies either of these two conditions, then Z is a solution to (1371) . There are exactly 
2£e-(e-so) = 2£^« such values for Z modulo t. □ 

Proof of Lemma [771 It is easily checked that CNjiX) = 1- If is odd, we observe that 

Now, suppose that {m,n) = 1. It follows that at least one of m and n must be odd. 
Without loss of generahty, we assume that n is odd. Choose integers mo and Uq so that 
Ammo + nno = 1. Then 



CNj{n)cNj{m) = (^—^Yli^'C^N\ai,n,f) 

aie(Z/nZ)* e\n 

^ E (^)'52(m,a2)n#C'5J^Km,/) 



a2e(Z/4mZ)* £\m' 
a2 = l (mod 4) 



f aiAmmo + a2nno\ ^ , . , . 

c>2[nm, aiAmmo + a2nno) 

\ nm I 



aie(Z/?iZ)*, 
a2e(Z/4mZ)* 
02 = 1 (mod 4) 

X JJ^ ij^C^N (ai4mmo + a2nno, nm, /) 
CArj(nm). 
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Hence CNj{n) is multiplicative in n. 
By dni, we find that 



-1)^2'^ 



0=1 (mod 4) 



a=5 (mod 



for a > 1. 

We now consider the case when is an odd prime power. In view of Lemma [TOl it is 
natural to split Ciyj{i°') into two parts, writing 



ae(Z/^"Z)* 



aG{Z/^°Z)* 
^|4Af+a/2 



SO that 



c^./(r) = cS;/r) + c^;/r). 

We concentrate on cj^''j(£°) first. Applying Lemma [TOl we have 



(0) 



(3^ 



(Z/£"Z)* ae(Z/£°'Z)* 



ae( 



i\AN+af 
^|(Af-l)2-a/2 



E 



ae(Z/^"Z)* 
44Af+a/2 
4(Ar-l)2-a/2 
( 



1 + 



E 



ae(Z/«)* 
44Ar+a/2 
l^£t(A^-l)2-a/2 



4A^ + a/^ 



+ E 



ae(Z/£"Z)* 
44iV+a/2 
^|(Ar-l)2-a/2 



1 + 



4A^ + af 



E 



ae(Z 
44Ar+a/2 



(39) 



In order to finish evaluating this sum, we split into cases. First, assume that i \ f. Then 
the sum defining cj^^j(£") is empty unless i \ N. In this case, i \ [N — 1)^ — a/^ if and only 
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if £ I AT - 1. Therefore, \ f andi\ N, then 



Pa-1 



a6(Z/ffl) 



ifilN-l 



E 

(£-l)[l+(f)] if 2 I a and AT- 1, 

i-1 if 2 I a and £ I - 1, 

if 2 t a 

(£-l)(l+(f)(^)^) if 2 I a, 

if 2ta 

(£ - 1) if 2 I a, 
if 2 t a 







(40) 



as 1, /) = (1 + (f ) i^Y) in this case. 

Now, suppose that i \ f. Under this assumption, we note that (|) — ( ^ 
with equation (|39|) and dividing through by we have 



Picking up 



E 



ae(Z/ffl)* 
^t(Ar-l)2-a/2 



a/2 



2 \ " r 



1 + 



AN + af 



2\ H 



+ E 



ae(Z/ffl)* 
^|(Ar-l)2-a/2 



aG{Z/«)* 
4(Af-l)2-a 



m + a 



E 



aG(Z/ffl)* 
^|(Af-l)2-a 



E 



+ 



E 



a^-4Ar (mod £) 



a^{N-lY (mod £) 



.6=1 



El- 



-N 



a\ " f AN + a 



N^-l 



(41) 



upon completing the sums and making the change of variables h = AN + a. One easily 
computes that 



E^ 



6=1 



6-4Ar\" 



- 1 if £ I AT, 

-l-(f) if AT and 2 I a, 
-1 if A^ and 2ta. 
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For example, the third case is Exercise 1(b) of |MV07l p. 301]. Therefore, 

- 2 if £ I and £ t /, 



Ji) ( 



Pa-l 



-2-(f)-(^) if£tiV/and2|a, 
-1 - ("f ) - (^) ' if n A^/ and 2 t «• 



.(0) 



It remains to compute c)^ f\ 



. We first consider the case when i \ f. Note that the sum 
Thus 



defining c^^\{i") is empty unless iV as well. Thus, under this assumption, we have that 



E 



j: i^y#cfia,r,i) 

(Z/£"Z)* 



ae(Z/£°Z)* 

^|47V+a 



']v^(«,r,i). 



ae(Z/£"Z)* 
£|4Ar+a 



In order to evaluate this last sum, for each a G we choose an integer representative 

in the range —AN < a < — 4N. This ensures that < z/^(4A^ + a) < a. There is exactly 
one such choice of a so that ^^{AN + a) = a, namely a = — AN . For 1 < t < a — 1, the 
number of such a with z/^(4A^ + a) = t is (£ — 1)£"~*~^, but for only half of those values is 
^m+a)/i j _ Perhaps, the easiest way to see this is to consider the base-£ expansion of 
AN + a for each a in this range. Therefore, applying Lemma [TO] again, we have 



L(a-1)/2J 



t=l Q<m+a<r ^ ^ t=l 0<4Af+a<£" 

ui{4:N+a)=t 



(J)(a,r,i) 



i/^(4Af+a)=2t 



t=i ^ 

^+ 1^^^K2J ^ ^+ l y (^^ _£-L(«-l)/2j^ 



Ar + 1 



Ar + 1 



Therefore, if i \ fN, then 
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We now compute c^'*j(^") in the case that i \ f. Note that, in this case, the sum defining 

cPf{i") is empty unless i \ N. Note that ueiAN + ap) > mm{ue{N),2iyi{f)} with equahty 
holding ifug{N) ^2iye{f). 

First, suppose that 2z/^(/) < Ui{N). Noting that e = > 2ui{f), by Lemma [10] 

we have that 



if and only if (f ) = (^ (4iv+a/y.^-.(/) j ^ ^ 

Hence, 



ae(Z/£"Z)* 

= 2#C»(l,l,/) 5: 

ae(Z/£"Z)* 

(f)=l 

ifl<2ue{f)<u,{N). 

Now, suppose that ue^N) < 2z/^(/). Since e = ui{Al°'p) > Vi{N), by Lemma [TUl we have 
that 

j2£-.W/2 if 2 I z/^(Ar) and (f ) = 1, 
otherwise 



= #cff(l,l,/) 

for every a G (Z/rZ)*. Hence, 

ae(Z/£"Z)* 
£|4Ar+a/2 

= #4"(u./) E 

if 2 I a, 
if 2 t a 



ifl<z/,(iV)<2z/,(/). 

Finally, consider the case when 2z/^(/) = Vi{N). Let r = vi{f) and s = z/^(A^) and write 
/ = r/^ and = tN^ with (£, /^A^^) = 1. Then 



aG(Z/£°Z)* ae(Z/^°Z)* ^ ^ 



ae{Z/£"Z)* 
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To evaluate this last sum, for each a e (Z/£"Z)*, wc choose an integer representative in 
the range —ANi < a < — 4Ni. This ensures that < Uf^ANe + a) < a, and hence that 
2r < ui[AN + a^^*^') < 2r + a. Similar to before, there is exactly one choice of a such that 
Vi{'iNi-\-a) = a, namely a — i'^ — AN^. For I < t < a — 1, there are (£ — choices with 

ue(ANe + a)^t, but for only half of those values is (^(^^li+S^'^ = i. Note that if £ | 4^^ + a, 
then (f) = (^). Therefore, if 1 < iyi{N) = 2ui{f), then 



'^fj(n = Z E {j) *cf(a,e,n 



t=0 0<4Ne+a<e" 



t=l 



0<4Af^+a<r 



: ^_^y £r+lo^m + j^a-l+r _ £-L(a-l)/2j 



'iNe + a 



--'E(-G))(^r 

,.-^.-i/(^)+^-l-(f) if 2 I a. 



:-f)+^-l-(f) if2|a, 
(^)-l if2ta. 

The lemma now follows by combining our computations for cj^^y.(£") and cj^''j(£"). 



□ 
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